The MIT license, focused dependency set, and release notes make the package easy to inspect. Its small repository and lack of security policy provide limited evidence of ongoing safeguards.
38%
Total Score
50
100
78
50
The latest release was about 9 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package intended as an application dependency.
The repository has had zero commits and zero active maintainers in the last three months, confirming that maintenance has not resumed recently.
There have been no new or closed issues or pull requests in the last month. Combined with the inactive commit history, this provides no evidence of current project activity.
The repository has only 1 star and 3 forks, indicating limited adoption evidence. Popularity is supporting evidence rather than a verdict, but it provides little compensating confidence here.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap for a package with no recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laralum/laralum Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.